What steps should be taken if you witness employee A giving out their password to employee B. Would an audit trail track what employee B did within

What steps should be taken if you witness employee A giving out their password to employee B. Would an audit trail track what employee B did within the system? Does HIM Director have access to run this audit trail and/or monitor the facility wide EHR?